Vulnerabilities & fixes · Archive

Vulnerabilities & fixes

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• CC-4878 - Cisco Releases Security Hardening Guidance for Multiple Cisco Products ↗ (opens in a new tab)

  Cyber Alert Feed · Published 2026-10-22 · First collected 2026-10-24

• NCSC-2026-0450 [1.00] [M/H] Kwetsbaarheden verholpen in Snort 3 van Cisco ↗ (opens in a new tab)

  NCSC NL advisories · Published 2026-10-22 · First collected 2026-10-24

• Warning: Multiple Critical vulnerabilities in PHP that can lead to Remote Code Execution, Patch Immediately or take offline! ↗ (opens in a new tab)

  CERT.BE advisories · Published 2026-10-22 · First collected 2026-10-24

• Risolte vulnerabilità in prodotti WatchGuard ↗ (opens in a new tab)

  CSIRT Italia news · Published 2026-10-22 · First collected 2026-10-24

• Climate Change in PHP — update or cut off now! ↗ (opens in a new tab)

  System Weakness - Medium · Published 2026-10-22 · First collected 2026-10-24

• Oracle Java Security Restriction Bypass Vulnerability ↗ (opens in a new tab)

  HKCERT news · Published 2026-10-22 · First collected 2026-10-24

• USN-8890-2: libsoup vulnerabilities ↗ (opens in a new tab)

  Ubuntu security notices · Published 2026-10-21 · First collected 2026-10-24

• The Science of Exploitability: Decoding BlueHammer ↗ (opens in a new tab)

  Qualys Security Blog · Published 2026-10-21 · First collected 2026-10-24

• Why Satellites Can't Count The Trees Felled At East Potomac ↗ (opens in a new tab)

  Secjuice · Published 2026-10-21 · First collected 2026-10-24

• [0day-rubbish] Parasoft Continuous Testing Platform 10.7.5-SNAPSHOT anonymous deserialization in the database restore path to JSP command execution as uid=1000 (9.8) ↗ (opens in a new tab)

  Full Disclosure · Published 2026-10-20 · First collected 2026-10-24

• CISA Adds Six Known Exploited Vulnerabilities to Catalog ↗ (opens in a new tab)

  CISA current activity · Published 2026-10-20 · First collected 2026-10-24

• Siemens Customers Targeted by ClickFix Attackers Exploiting DLL Side-Loading Flaw ↗ (opens in a new tab)

  Infosecurity Magazine · Published 2026-10-20 · First collected 2026-10-24

• Drupal Patches Critical RCEs: CVE-2026-108097 & 108099 ↗ (opens in a new tab)

  SOCRadar® Cyber Intelligence Inc. · Published 2026-10-19 · First collected 2026-10-24

• Targeted ads delivered 0-click exploits to install mercenary malware ↗ (opens in a new tab)

  Security - Ars Technica · Published 2026-10-15 · First collected 2026-10-24

• CVE-2026-0320 PAN-OS: Authenticated Admin Command Injection Vulnerability (Severity: MEDIUM) ↗ (opens in a new tab)

  Palo Alto Security Advisories · Published 2026-10-15 · First collected 2026-10-24

• Pretexting Explained? Techniques, Examples and Prevention ↗ (opens in a new tab)

  Archives - SecureLayer7 - Offensive Security, API Scanner & Attack Surface Management · Published 2026-10-15 · First collected 2026-10-24

• Discovery Has Scaled. Remediation Hasn’t: Top Takeaways on Threat Exposure Analytics ↗ (opens in a new tab)

  Synack · Published 2026-10-15 · First collected 2026-10-24

• Vulnerability in Sparx Systems Enterprise Architect software ↗ (opens in a new tab)

  CERT.PL news · Published 2026-10-15 · First collected 2026-10-24

• Bank of America hired 1,000 security consultants to address Mythos-spotted flaws ↗ (opens in a new tab)

  Latest from ITPro in Security · Published 2026-10-15 · First collected 2026-10-24

• VU#948176: Multiple TLS Libraries can Bypass Delegation Enforcement ↗ (opens in a new tab)

  CERT/CC Vulnerability Notes · Published 2026-10-14 · First collected 2026-10-24

• FreeBSD-EN-26:25.tzdata ↗ (opens in a new tab)

  FreeBSD security · Published 2026-10-14 · First collected 2026-10-24

• A Vulnerability in Ivanti Connect Secure Could Allow for Arbitrary Code Execution ↗ (opens in a new tab)

  Cyber Security Advisories - MS-ISAC · Published 2026-10-13 · First collected 2026-10-24

• From 30 Systems to Over 100: What CISA’s Revised Water Sector Figures Reveal About the OT Detection Gap ↗ (opens in a new tab)

  IOActive · Published 2026-10-13 · First collected 2026-10-24

• Arbitrary file write in grpc phQueryMaster ↗ (opens in a new tab)

  FortiGuard Labs | FortiGuard Center - IR Advisories · Published 2026-10-13 · First collected 2026-10-24

• Expanding Visibility Into Chinese Government-linked Cyber Threat Actors ↗ (opens in a new tab)

  VulnCheck Blog · Published 2026-10-13 · First collected 2026-10-24

• The 10 best VPN detection tools for fraud prevention in 2026 ↗ (opens in a new tab)

  Fingerprint Blog RSS Feed · Published 2026-10-12 · First collected 2026-10-24

• 2026-016: Critical Vulnerability in GitLab CE and EE ↗ (opens in a new tab)

  CERT-EU Security Advisories · Published 2026-10-12 · First collected 2026-10-24

• Why "secure by design" is the new standard for open source ↗ (opens in a new tab)

  Red Hat Security · Published 2026-10-09 · First collected 2026-10-24

• One Favicon Hash to a Carding C2: Dissecting “Olho de Deus” ↗ (opens in a new tab)

  CIP Blog · Published 2026-10-08 · First collected 2026-10-24

• Microsoft, Adobe, Apple, and Foxit vulnerabilities ↗ (opens in a new tab)

  Cisco Talos Blog · Published 2026-10-07 · First collected 2026-10-24